Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0b8fa757-4a53-31a5-9a91-dac11b836ffd.roa
File:                     0b8fa757-4a53-31a5-9a91-dac11b836ffd.roa (raw, json)
Hash identifier:          +SEik9lqzqwce/P58Srph8JP3xUa/npvG6/glT38obo=
Subject key identifier:   A9:67:9D:48:FE:A2:6C:CC:72:8E:F0:E1:B3:B7:7B:13:1F:FE:4C:44
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339DBC86E6ABC8CFC9CBFC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0b8fa757-4a53-31a5-9a91-dac11b836ffd.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        192.119.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:db:c8:6e:6a:bc:8c:fc:9c:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=c83dde24-a318-41ad-9884-2d9f703b823a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c4:c0:f0:88:09:de:a7:61:d1:19:40:67:de:
                    b2:2d:71:4c:92:0d:c5:c8:63:b9:36:2f:b1:4c:a9:
                    9f:cd:5c:0f:bc:cb:2a:ef:9b:47:3b:28:96:a1:8b:
                    10:34:42:42:23:07:0b:47:46:5d:04:1e:d1:70:fe:
                    9c:df:36:3a:96:51:ed:8f:b7:e5:22:fb:b3:91:35:
                    bf:4d:a1:47:75:6d:b7:ad:f0:9e:b6:eb:eb:9c:64:
                    c1:f1:49:f2:70:36:56:f1:2d:bf:72:ff:4b:ce:3e:
                    d7:1d:12:37:b9:25:9f:4a:df:b0:80:8e:7e:ea:ea:
                    88:92:24:03:91:e8:64:68:39:e6:9e:ac:97:2a:c2:
                    12:80:0c:1e:44:a2:4b:ca:de:11:28:cb:74:29:23:
                    ee:30:25:8f:ae:44:6a:e0:d3:01:18:c5:b6:ae:31:
                    7f:99:83:b8:08:6e:34:80:f6:f0:13:b5:0a:ed:6b:
                    6b:4a:ab:eb:e8:f3:ba:0c:1d:d8:5a:db:6d:cd:6b:
                    c3:3e:eb:02:ee:e5:a1:4c:60:94:5a:54:3b:e0:9a:
                    69:d5:ed:bb:b0:ab:e6:bb:db:56:90:60:40:2f:e0:
                    89:f0:91:ad:77:07:5f:f0:32:87:35:5f:6e:2a:59:
                    e2:e1:50:39:d4:98:cf:44:bc:5d:95:ac:f9:cc:8e:
                    72:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:67:9D:48:FE:A2:6C:CC:72:8E:F0:E1:B3:B7:7B:13:1F:FE:4C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0b8fa757-4a53-31a5-9a91-dac11b836ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f8:b9:ec:dd:9c:f6:4d:f7:1e:99:57:74:f1:84:7d:a6:a0:
         d0:f8:f4:8f:74:24:bf:a3:86:44:eb:a8:e5:6b:30:3b:c4:de:
         41:a0:1a:68:cb:4c:db:e5:b1:e1:41:54:25:cf:ad:cb:32:f4:
         6b:06:b5:eb:06:dd:fc:db:61:2c:cb:22:a6:13:27:78:d4:d8:
         63:e4:82:cc:d5:c7:06:b9:36:0e:2d:70:f5:22:1d:d0:05:14:
         ee:54:e0:a1:1a:86:2b:b8:10:19:94:81:1e:25:5a:24:00:21:
         c0:56:b8:83:a0:e0:37:08:91:1a:1a:bb:c2:67:1b:93:af:b1:
         15:4f:40:25:7e:97:19:ed:c7:46:37:d5:49:06:af:f4:dc:4e:
         87:80:1e:1a:0d:9b:81:ea:db:ef:ac:cd:ab:b9:34:92:f6:4f:
         a8:b3:9f:78:5a:11:c7:04:21:93:14:25:77:4f:83:92:76:e7:
         44:98:b4:8d:4e:76:1f:d2:34:2c:b4:66:1e:1c:ba:88:64:34:
         84:cd:4d:93:d9:a1:09:d4:28:f3:b7:e6:56:21:7e:5a:68:3f:
         30:a1:ef:c8:1a:ab:21:d2:d6:9d:10:49:f8:fd:72:b4:73:d7:
         d2:3d:9d:5e:86:e1:12:17:30:25:17:00:ef:09:6f:27:74:55:
         4c:75:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----